Google Git
Sign in
chromium/chromium/src/sandbox/HEAD
  1. 6254e44 Make ssmole@microsoft.com a sandbox/win/owners by Stefan Smolen · 6 hours ago main
  2. 6834a11 Fix unsafe buffer usage in sandbox/linux/services/proc_util.cc by Mahmoud Rashad · 2 days ago
  3. 38c6140 sandbox: skip uprobe/uretprobe in SandboxBPF.SyntheticPolicy by utzcoz · 5 days ago
  4. 61ba54e Replace KiBU/MiBU/etc with KiB/MiB/etc for sandbox/policy/win by Joe Mason · 7 days ago
  5. e7468b2 [net] Remove kAddressTrackerLinuxIsProxied flag by Jeffrey Yu · 9 days ago
  6. e3c5d84 Fix unsafe buffer usage in setuid_sandbox_host.cc by Mahmoud Rashad · 9 days ago
  7. 7cee0c2 Update sandbox .sb files for a macOS 13 minimum by Avi Drissman · 12 days ago
  8. 9fe45cb [macoOS] Removes the kMacSandboxDistributedNotifications feature by Bryan Oltman · 12 days ago
  9. 1f39137 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Lily Chen · 2 weeks ago
  10. 125c227 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 3 weeks ago
  11. f1b1465 Reland "Reland "[mac] Enable aperitif on helper executables."" by Yue She · 3 weeks ago
  12. 9e38a92 Revert "Reland "[mac] Enable aperitif on helper executables."" by Volodymyr Plotkin · 3 weeks ago
  13. 618789c webnn: setup coreml compiler sandbox rules by Phillis Tang · 3 weeks ago
  14. c45c430 Reland "[mac] Enable aperitif on helper executables." by Liza Burakova · 3 weeks ago
  15. 297ca3f Revert "[mac] Enable aperitif on helper executables." by Adem Derinel · 3 weeks ago
  16. 22990fe [mac] Enable aperitif on helper executables. by Liza Burakova · 3 weeks ago
  17. 9c8b324 Fix include guard presubmit warnings by Victor Hugo Vianna Silva · 4 weeks ago
  18. 25aab98 Revert "[macOS] Use process-isolated subdirectories for the GPU child process" by Aliaksei Bahdzevich · 4 weeks ago
  19. fcac155 [macOS] Use process-isolated subdirectories for the GPU child process by Bryan Oltman · 4 weeks ago
  20. 2ac1ce3 Revert "Remove file-issue-extension permission from gpu seatbelt profile" by Bryan Oltman · 4 weeks ago
  21. 727326f Start loading msdia140.dll when loading dbghelp.dll by Devon Loehr · 5 weeks ago
  22. a9e64af Add GRO to fieldtrial_testing_config by Mohannad Farrag · 5 weeks ago
  23. 8f54579 Enable WinSboxModuleTamperingProtection by default by Will Harris · 5 weeks ago
  24. af0b56a [unsafe-buffers] Update allow_unsafe_buffers in sandbox/ SUID C files by Arthur Sonzogni · 5 weeks ago
  25. 8dcfa32 [sandbox/linux] Fix directory traversal vulnerability by Greg Thompson · 5 weeks ago
  26. 86344cd Enable WinSboxHighGPUJobMemoryLimits by default by Will Harris · 6 weeks ago
  27. 997a324 [finch] Remove the three-argument BASE_FEATURE macro everywhere it is by Julia Hansbrough · 6 weeks ago
  28. 361c10d Remove file-issue-extension permission from gpu seatbelt profile by Bryan Oltman · 6 weeks ago
  29. b061f8b [sandbox/linux] Fix off-by-one DCHECK in BrokerSimpleMessage::WriteBytes by Karim El Harim · 7 weeks ago
  30. a663ede media: make enable of v4l2/vaapi on linux possible by Jianfeng Liu · 7 weeks ago
  31. 37c67f3 [unsafe-buffers] Sandbox: Use std::array in baseline_policy_unittest by Arthur Sonzogni · 8 weeks ago
  32. 91b71b3 Fix unsafe buffer usage in seccomp_broker_process_unittest.cc by Joshua Peraza · 8 weeks ago
  33. 3e19954 [unsafe-buffers] Remove allow_unsafe_buffers from sandbox/ by Arthur Sonzogni · 8 weeks ago
  34. 588d321 Clean up: Fix 5 wrong escapes in 1 DEPS files in sandbox by yoshiki iguchi · 9 weeks ago
  35. 72d1933 Fix macOS 27 build of `chrome` target by Victor Hugo Vianna Silva · 9 weeks ago
  36. c83dc79 Add UNSAFE_BUFFERS macros to C API calls. by Liza Burakova · 9 weeks ago
  37. 6d5856b WebNN: Add a dedicated flag to disable the WebNN compiler process sandbox by mingmingtasd · 9 weeks ago
  38. b004489 Reland "Fix Javaless Renderer bugs" by Sam Maier · 9 weeks ago
  39. 7868c25 Revert "Fix Javaless Renderer bugs" by luci-bisection@appspot.gserviceaccount.com · 9 weeks ago
  40. 8606397 Fix Javaless Renderer bugs by Sam Maier · 9 weeks ago
  41. 90bdb71 WebNN: Align WebNN Compiler job memory limit with the renderer process by mingmingtasd · 9 weeks ago
  42. 4273744 sandbox: Allow recvmmsg in seccomp sandbox on Linux by Mohannad Farrag · 10 weeks ago
  43. a9d727a [macOS] Guard ODME process directory access behind flag by Bryan Oltman · 10 weeks ago
  44. 859a487 [macOS] Guard network process directory access behind flag by Bryan Oltman · 10 weeks ago
  45. 18a3f72 [WebNN] Tighten model-compilation utility sandbox to USER_LOCKDOWN by Rafael Cintron · 3 months ago
  46. 974cb22 fix: UsePerformanceHelper affinity mode by Richard Townsend · 3 months ago
  47. db7ad29 Remove code supporting macOS 12 from sandbox by Avi Drissman · 3 months ago
  48. 0bc587e Harden Speech Recognition Utility Process Sandbox on Windows by Evan Liu · 3 months ago
  49. 43b6b0c [tracing] Migrate async track events to more appropriate alternatives in sandbox/win by Etienne Pierre-doray · 3 months ago
  50. b97abb9 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/win by Joe Mason · 3 months ago
  51. 7596fc4 fix: remove incorrect flag from sandbox/ test by Richard Townsend · 3 months ago
  52. 026845c Disable BaselinePolicyAndroid.SchedSetAffinity_Maybe_Allowed by Masa Fujita · 3 months ago
  53. ea341c6 [Gardener] Disable SchedGetAffinity_Maybe_Allowed test. by Filipa Senra · 3 months ago
  54. 534adc7 Revert "[Gardening] Fix BaselinePolicyAndroid affinity test" by Ivana Žužić · 3 months ago
  55. 9c0871b [Gardening] Fix BaselinePolicyAndroid affinity test by Ivana Žužić · 3 months ago
  56. d7337e5 Remove setPreferPowerEfficiency experiment by Richard Townsend · 3 months ago
  57. 4c39da1 Migrate SysInfo::AmountOfPhysicalMemory callers to AmountOfTotalPhysicalMemory in sandbox/policy/linux by Joe Mason · 3 months ago
  58. d197319 [macOS] Deny distributed notifications in the renderer sandbox by Bryan Oltman · 4 months ago
  59. d407c40 Run `gn format` on all BUILD.gn files. by Matt Stark · 4 months ago
  60. 1ec9592 Move test-only GetNtPathFromWin32Path into test file by Emily Stark · 4 months ago
  61. 272ebff Reland "Fix mmap seccomp policy in speech recognition sandbox" by Andrew Paseltiner · 4 months ago
  62. f8acb8c Revert "Fix mmap seccomp policy in speech recognition sandbox" by Ian Wells · 4 months ago
  63. 37259f7 Fix mmap seccomp policy in speech recognition sandbox by Andrew Paseltiner · 4 months ago
  64. d072df6 WebNN: Add kWebNNModelCompilation sandbox type by mingmingtasd · 4 months ago
  65. 2c9c12e seccomp: Add a test to ensure long term feature detection by Primiano Tucci · 4 months ago
  66. 0b13e47 [sandbox] Fix SYS_SECCOMP conflict with newer glibc by Ho Cheung · 4 months ago
  67. 3c404be Reland "Remove dependency on ATL Security objects" by Chris Davis · 5 months ago
  68. 2492a93 [sandbox] Enable Module Tampering Protection for CIG processes by Klaus · 5 months ago
  69. 5d45cbe Revert "Remove dependency on ATL Security objects" by Justin Lulejian · 5 months ago
  70. d6ded81 Remove dependency on ATL Security objects by Chris Davis · 5 months ago
  71. 9da15ab Allow PI futex operations on Android in the sandbox. by Primiano Tucci · 5 months ago
  72. 68cd6a7 Add akhna & ellyjones to sandbox/linux/OWNERS by Alex Gough · 5 months ago
  73. 597bd6b [Sandbox] Add a feature to remove the job memory limit for GPU by Jiawei Shao · 5 months ago
  74. 9bba534 Fix various IWYU errors related to base/logging.h by Daniel Cheng · 5 months ago
  75. 37aaf1a [sandbox] Update seccomp-bpf filters for arm64 glibc by Tom Anderson · 5 months ago
  76. 68f7598 [task] Inject ThreadDelegate through Thread constructor by Etienne Pierre-doray · 5 months ago
  77. 815e874 Cleanup: Remove histogram macros header includes in sandbox by Alexei Svitkine · 5 months ago
  78. 2ee2cbb Tighten macOS GPU sandbox restrictions by Dale Curtis · 6 months ago
  79. eb6cc9a Revert "Reland "Enable network sandbox by default on Windows"" by Will Harris · 6 months ago
  80. 0bbf2e0 [Windows] Remove legacy TestRunner code from the sandbox tests. by James Forshaw · 6 months ago
  81. e2a5f67 Reland "Enable network sandbox by default on Windows" by Will Harris · 6 months ago
  82. ab1e3e9 Convert to UNSAFE_TODO in sandbox by Arthur Sonzogni · 6 months ago
  83. fc6163b [Windows] Refactor remaining old style TestRunner integration tests. by James Forshaw · 6 months ago
  84. b4a606e [Windows] Refactor integration tests for process mitigations. by James Forshaw · 6 months ago
  85. 1eae871 spanification: automatically spanify sandbox/linux/bpf_dsl/test_trap_registry_unittest.cc etc. by Francisco Ochoa · 6 months ago
  86. 88e03e3 [Windows] Refactor integration tests for IPC, LPC, Warmup and Handles. by James Forshaw · 6 months ago
  87. ffe1f92 [Windows] Refactor sandbox validation tests. by James Forshaw · 6 months ago
  88. f2387b2 [Windows] Refactor integration tests for ZeroAppShim and DLL unloading. by James Forshaw · 6 months ago
  89. 9e6fda1 [Windows] Refactor integration tests for integrity levels. by James Forshaw · 6 months ago
  90. 94a49cc [Windows] Refactor integration tests for IPC, Handle Closer, ASAN. by James Forshaw · 6 months ago
  91. 59415c2 [Windows] Refactor integration tests for AppContainer. by James Forshaw · 6 months ago
  92. 2ab77c9 Allow MCAST_JOIN/LEAVE_SOURCE_GROUP in network service seccomp filter by Omar Ramadan · 6 months ago
  93. a6b198e [Windows] Update sandbox policy rule fuzzer to use wstring_view. by James Forshaw · 6 months ago
  94. b82014a [Windows] Update select tests to use new TestRunner API. by James Forshaw · 6 months ago
  95. 831481e [Windows] Implement new sandbox test runner API. by James Forshaw · 6 months ago
  96. 065e9b4 [Windows] Rework TestRunner dispatch and remove unsafe buffers. by James Forshaw · 6 months ago
  97. faf36c3 [Windows] Use base::CommandLine in SpawnTargetAsync. by James Forshaw · 6 months ago
  98. 10dec33 [Windows] Use string_view for sandbox policy interface. by James Forshaw · 7 months ago
  99. 4f48746 [Windows] Convert Sid class to using wstring_view and span. by James Forshaw · 7 months ago
  100. 114deb3 [Okta SSO] Execute URLSessionURLLoader in the Network Service by Stanisław Solarewicz · 7 months ago